Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/afcd40-2a50-4c11-ba47-e11ffec89cd4/1/kzJxEXB2iVD92fne_mUfLVoTEr4.mft
File: kzJxEXB2iVD92fne_mUfLVoTEr4.mft (raw, json)
Hash identifier: yY+any6Mpj5bK4ltTXqa3d41P9+ccWt8gl+XLKM21W4=
Subject key identifier: 9D:C5:F0:48:3E:B6:0F:0E:94:A1:4B:0B:8C:D2:9F:9A:36:BC:44:BE
Authority key identifier: 93:32:71:11:70:76:89:50:FD:D9:F9:DE:FE:65:1F:2D:5A:13:12:BE
Certificate issuer: /CN=9332711170768950fdd9f9defe651f2d5a1312be
Certificate serial: 019FA116F626DFCE3686AE9195B2BD5C2B93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kzJxEXB2iVD92fne_mUfLVoTEr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/afcd40-2a50-4c11-ba47-e11ffec89cd4/1/kzJxEXB2iVD92fne_mUfLVoTEr4.mft
Manifest number: 0DCE
Signing time: Mon 27 Jul 2026 01:01:04 +0000
Manifest this update: Mon 27 Jul 2026 01:01:04 +0000
Manifest next update: Tue 28 Jul 2026 01:01:04 +0000
Files and hashes: 1: kzJxEXB2iVD92fne_mUfLVoTEr4.crl (hash: ZkPHB30SGZwN/Srx9L+FUTIBUxcdmP4HOwG8LZYkJwk=)
2: rpScVUsryyaJ-F5kWegdG7uTvQI.roa (hash: 90JJSR9HRiVyxHT2c148KiZc/jsGWJOiBBV+kTkgs7E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/afcd40-2a50-4c11-ba47-e11ffec89cd4/1/kzJxEXB2iVD92fne_mUfLVoTEr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/afcd40-2a50-4c11-ba47-e11ffec89cd4/1/kzJxEXB2iVD92fne_mUfLVoTEr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/kzJxEXB2iVD92fne_mUfLVoTEr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 01:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:16:f6:26:df:ce:36:86:ae:91:95:b2:bd:5c:2b:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9332711170768950fdd9f9defe651f2d5a1312be
Validity
Not Before: Jul 27 01:01:04 2026 GMT
Not After : Jul 28 01:01:04 2026 GMT
Subject: CN=9dc5f0483eb60f0e94a14b0b8cd29f9a36bc44be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:91:88:59:3e:32:9a:9c:f6:88:7c:05:ca:ff:
17:e7:62:c1:00:9c:06:9b:51:46:e2:c9:1e:d4:35:
f5:48:59:50:57:19:4b:2c:0a:ed:e0:38:c1:b4:bb:
01:cd:3a:02:de:2b:88:b2:d8:86:39:a2:46:50:ba:
c9:12:03:9e:57:24:dd:69:d1:4f:1e:d1:54:8c:f0:
32:e8:f3:4e:b1:2e:03:4f:f5:5d:1f:9a:71:54:9b:
dc:3a:70:eb:9e:8d:f1:e1:1d:74:be:e0:cd:c0:36:
bf:d8:74:50:b7:52:28:3e:47:ed:2e:13:6e:ec:a3:
2a:55:3d:74:d4:92:70:ec:b1:57:a7:b5:78:f9:e6:
11:c2:23:e8:3a:c9:4b:f5:91:c6:22:9a:db:97:b4:
f7:3b:0e:08:69:ff:4d:00:13:c8:24:cc:74:ac:9f:
45:a0:cc:ce:4c:c0:45:75:2c:be:ca:9d:dc:b9:91:
f0:82:df:78:27:40:56:96:94:e7:ea:40:1b:00:0c:
3e:d1:45:57:cc:09:8a:22:62:13:78:29:32:52:5f:
72:2e:40:61:b4:92:ab:8a:3b:31:33:70:a3:a6:90:
c5:29:56:23:6b:23:95:f0:96:df:30:49:23:ab:d2:
22:dd:84:6e:8d:1a:29:6b:76:9c:ce:3c:6d:91:8a:
96:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:C5:F0:48:3E:B6:0F:0E:94:A1:4B:0B:8C:D2:9F:9A:36:BC:44:BE
X509v3 Authority Key Identifier:
keyid:93:32:71:11:70:76:89:50:FD:D9:F9:DE:FE:65:1F:2D:5A:13:12:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kzJxEXB2iVD92fne_mUfLVoTEr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/afcd40-2a50-4c11-ba47-e11ffec89cd4/1/kzJxEXB2iVD92fne_mUfLVoTEr4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/afcd40-2a50-4c11-ba47-e11ffec89cd4/1/kzJxEXB2iVD92fne_mUfLVoTEr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:1a:8c:d7:bb:d8:31:78:bb:18:6c:00:a3:30:5a:73:a7:2e:
51:60:b6:5f:64:21:73:7a:02:31:6d:a0:75:31:c9:8b:27:fe:
a1:75:c7:13:90:2e:ac:d0:a7:d2:52:7b:26:64:76:ee:c9:2d:
2d:9a:fe:5e:fc:26:c1:8f:15:37:f8:c6:b5:d4:ec:46:42:c6:
79:ea:5d:98:2c:ca:eb:8f:2d:55:33:21:e7:c0:52:0e:e6:7a:
20:24:79:b5:ce:68:15:6f:fe:3c:5e:1a:ee:1f:63:87:c9:a5:
4b:e4:19:6c:79:b4:7e:19:46:a4:7d:6a:29:34:66:ec:1a:2b:
d1:84:ba:6a:f7:d6:06:e0:63:68:ee:9b:78:9f:62:ac:ce:8a:
91:5a:3f:24:c6:90:f5:42:36:f1:14:85:12:73:f8:a4:d2:1d:
d3:3d:e3:92:73:ad:f9:ac:1d:3f:f6:57:14:16:4e:e4:69:e1:
f0:57:50:a6:93:e0:a4:6b:93:28:9a:65:12:13:0a:5b:51:30:
ef:38:9f:9b:c4:c1:36:37:1b:0b:ee:39:62:d0:b1:53:fc:8c:
f1:79:7d:b1:04:46:cf:c9:d0:68:9a:66:3b:97:e2:37:80:dd:
d4:6b:e3:c2:c8:e8:b3:59:c4:1c:0f:fb:ab:34:bb:d1:05:35:
a2:51:f5:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 10:26:19 2026 by rpki-client